Solved

Mailbox Restore: Recurring Calendar Meeting Update: You do not have permission to send the message on behalf of specified user

Posted on 2014-03-12
10
872 Views
Last Modified: 2014-05-05
We had one of our Exchange mailbox databases become corrupt and it was in a "dirty shutdown" state. We worked with Microsoft however it ended up that we had to restore the mailboxes on that database from backup from the night before.

After the restoration of the mailbox database, whenever users on this database try to send and update to a calendar invite they are receiving an error message that states "You do not have permission to send the message on behalf of specified user".

I have tried setting the "NT AUTHORITY\USER" permission for Full Access and Send As permissions to ensure that the user has full access on their mailbox and items.

Thanks for your assistance!
0
Comment
Question by:leeii15
  • 6
  • 3
10 Comments
 
LVL 38

Expert Comment

by:Adam Brown
ID: 39925071
NT AUTHORITY\SELF is the permission you would need to have on there. That said, make sure that the users have their reply address set to be the same as the address that those invites are being sent to.
0
 

Author Comment

by:leeii15
ID: 39926217
Thanks for the reply. In conjunction with this mailbox crash, we did change our email domain due to a name change (lets calls the new email "user@domain2.com"). We kept the old email address (user@domain1.com) attached to each recipient mailbox as an alias and set the "user@domain2.com" as the primary SMTP. So prior to opening this question, I thought that this could have been a cause so I did go into one of the mailboxes affected, and unchecked the "Automatically update email addresses based on email address policy" option and set the "user@domain1.com" as the Primary SMTP address which I believe makes this the Reply To address.

This morning, I did verify that the "user@domain1.com" was still set as the primary email address however, when I ran the test it still failed with the same error.

I did verify that one of the mailboxes in question still contained the "NT AUTHORITY\SELF" for both "Send-As" and "FullAccess" permissions.

The add these permissions, I ran the following in Powershell and then verified in Exchange Management Console

get-Mailbox -server {ServerName} -ResultSize Unlimited | Add-ADPermission -User 'NT AUTHORITY\SELF' -ExtendedRights 'Send-as'
get-Mailbox -server {ServerName} -ResultSize Unlimited | Add-MailboxPermission -User 'NT AUTHORITY\SELF' -AccessRights FullAccess

Open in new window

Also, I should have mentioned that this is Exchange 2007.

Thanks
0
 

Author Comment

by:leeii15
ID: 39926293
I just wanted to give an update. It appears that we have a problem with permissions sticking. I just went back into the same mailbox and checked the "Manage Send As Permission" option and now the "NT AUTHORITY\USER" is missing again.

It seems that when I add the permission within about 30 minutes it is removed.
0
 
LVL 63

Expert Comment

by:Simon Butler (Sembee)
ID: 39927644
Try moving an affected user to a new database.

Simon
0
 

Author Comment

by:leeii15
ID: 39927773
I tried moving one of the mailboxes to a temporary mailbox DB and it has the same issue.
0
What is SQL Server and how does it work?

The purpose of this paper is to provide you background on SQL Server. It’s your self-study guide for learning fundamentals. It includes both the history of SQL and its technical basics. Concepts and definitions will form the solid foundation of your future DBA expertise.

 
LVL 63

Expert Comment

by:Simon Butler (Sembee)
ID: 39928896
Does the problem occur with a NEW calendar entry?

Simon.
0
 

Author Comment

by:leeii15
ID: 39928945
No it doesn't. New appointments are not affected.
0
 
LVL 63

Expert Comment

by:Simon Butler (Sembee)
ID: 39933983
In that case I would have to put it down as a side effect of the recovery operation and the items needs to be recreated. It may well have been a corruption that existing at the point of the backup being taken which wasn't seen.

Simon.
0
 

Accepted Solution

by:
leeii15 earned 0 total points
ID: 40032597
It was an issue with the items and their permission level after restoring. Unfortuantly I did not find a fix for this and the items had to be deleted using MFCMAPI and then recreated by the user.
0
 

Author Closing Comment

by:leeii15
ID: 40041615
There was no solution provided except what we already knew.
0

Featured Post

Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Finding original email is quite difficult due to their duplicates. From this article, you will come to know why multiple duplicates of same emails appear and how to delete duplicate emails from Outlook securely and instantly while vital emails remai…
This article aims to explain the working of CircularLogArchiver. This tool was designed to solve the buildup of log file in cases where systems do not support circular logging or where circular logging is not enabled
This video discusses moving either the default database or any database to a new volume.
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …

863 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

23 Experts available now in Live!

Get 1:1 Help Now